Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          YtB7uU4HPRyaCa14jeNS+3z+3/+nfJ4oNjocWVu8Iuw=
Subject key identifier:   82:DB:C9:1C:F3:5C:7E:95:59:CF:08:CB:5B:C9:B4:0C:DF:4A:02:27
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       019D265FC7FA4BF43A34E40047297566C09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:44 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:44 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:44 +0000
Files and hashes:         1: 4pR5djsHM2EsPS0T7-XycSFJxHQ.roa (hash: ZnT7/tbRl9arj2zsaTehaLwj6F/LDx/pFFbSN9w0fi8=)
                          2: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: kN9TftQD+veD1hmgJ2xJGC32cvOtWrmMRrD4HmLQnNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:c7:fa:4b:f4:3a:34:e4:00:47:29:75:66:c0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Mar 25 19:01:44 2026 GMT
            Not After : Mar 26 19:01:44 2026 GMT
        Subject: CN=82dbc91cf35c7e9559cf08cb5bc9b40cdf4a0227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:fc:58:0d:f7:4a:b5:05:9b:9a:74:c7:a0:
                    c0:43:aa:c7:43:ba:78:05:68:1e:c8:76:7b:69:6e:
                    c0:b9:c4:3a:a5:d1:ad:ec:03:d7:2c:7e:63:bd:55:
                    66:85:94:e5:2b:5d:c9:5e:6c:8d:8f:29:2b:15:92:
                    5a:48:77:64:9a:98:fd:cd:8a:da:6a:39:d6:8e:1f:
                    ca:9f:a9:fd:9e:a2:8d:a5:a8:5a:8d:03:f0:04:24:
                    44:a4:c3:c1:b5:55:af:58:86:f8:bf:70:44:7b:70:
                    ee:ba:99:42:e5:aa:2b:64:25:7a:35:10:8c:d5:19:
                    be:c8:6d:99:cd:1d:08:e7:18:fd:c0:1e:56:3f:0d:
                    74:08:99:34:92:9d:9e:80:e3:cc:29:3b:2f:6c:f4:
                    1c:8b:98:68:c7:23:3e:87:56:58:77:ad:84:17:a7:
                    6a:6a:de:8b:5b:91:f5:4b:45:d8:ee:6e:1e:6a:12:
                    79:dd:b7:f4:30:74:dc:51:09:11:2e:3a:e2:1e:e0:
                    ec:b7:18:d7:8b:64:db:57:20:31:62:b7:e9:03:b1:
                    cc:04:1a:b6:1c:eb:a6:e9:7c:b5:e2:a9:d0:f8:0f:
                    2f:a4:bf:a2:f6:14:40:be:53:22:d5:71:9a:c2:4d:
                    25:27:9a:89:de:6b:49:a6:02:91:e7:84:ed:c7:ec:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:C9:1C:F3:5C:7E:95:59:CF:08:CB:5B:C9:B4:0C:DF:4A:02:27
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cd:59:21:13:f1:34:c8:e9:0c:d5:3f:bf:61:cb:8b:24:50:
         78:7d:b1:46:0a:04:ac:03:e5:cf:19:85:d7:e6:42:31:36:7a:
         93:1a:cf:90:cb:9e:c3:65:28:a7:4b:c0:1e:08:79:b2:70:39:
         4a:4e:73:10:0e:33:3e:d5:3a:b0:ce:4d:f8:81:0b:5a:13:d9:
         0f:1f:af:c2:0e:40:81:15:4a:26:0c:c9:09:69:22:f0:9b:b9:
         e8:50:a2:0b:be:82:f6:d0:2e:4f:17:2c:48:7d:de:41:57:20:
         ee:1e:93:b1:10:79:7b:30:ae:be:4b:82:c5:29:42:fe:ef:47:
         ce:b7:b4:c5:6f:08:b0:cf:95:33:4a:74:76:bf:3a:50:ee:87:
         d4:45:d8:48:fc:25:dd:7b:77:11:1d:e7:48:35:93:fe:4b:ac:
         17:eb:92:28:30:6c:3f:be:0b:3e:19:fb:77:c4:e7:a7:fc:01:
         ee:8e:f5:de:f0:4c:c6:d7:0a:bd:e2:11:8c:01:70:0c:4f:c3:
         2c:25:b3:5e:4a:ba:6e:7a:c4:5a:e9:a3:29:e9:54:15:66:5c:
         56:f2:78:cb:45:f8:88:49:33:8c:8c:33:68:d6:82:8c:30:51:
         2b:30:1d:28:a9:a5:4f:92:9a:a0:0f:87:22:8c:83:dd:7b:d0:
         3b:56:58:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8f6S/Q6NOQARyl1ZsCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTdiMjRmODdlYTUxNDQ2ZDUxOWFmZDRmZTYwNDE5MTk4
ZWMwMTIwHhcNMjYwMzI1MTkwMTQ0WhcNMjYwMzI2MTkwMTQ0WjAzMTEwLwYDVQQD
Eyg4MmRiYzkxY2YzNWM3ZTk1NTljZjA4Y2I1YmM5YjQwY2RmNGEwMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfn8WA33SrUFm5p0x6DAQ6rHQ7p4
BWgeyHZ7aW7AucQ6pdGt7APXLH5jvVVmhZTlK13JXmyNjykrFZJaSHdkmpj9zYra
ajnWjh/Kn6n9nqKNpahajQPwBCREpMPBtVWvWIb4v3BEe3DuuplC5aorZCV6NRCM
1Rm+yG2ZzR0I5xj9wB5WPw10CJk0kp2egOPMKTsvbPQci5hoxyM+h1ZYd62EF6dq
at6LW5H1S0XY7m4eahJ53bf0MHTcUQkRLjriHuDstxjXi2TbVyAxYrfpA7HMBBq2
HOum6Xy14qnQ+A8vpL+i9hRAvlMi1XGawk0lJ5qJ3mtJpgKR54Ttx+w3oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILbyRzzXH6VWc8Iy1vJtAzfSgInMB8GA1UdIwQY
MBaAFEunsk+H6lFEbVGa/U/mBBkZjsASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgt
YTI2ODg5ZWUyMmMyLzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgtYTI2ODg5ZWUyMmMy
LzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmc1ZIRPx
NMjpDNU/v2HLiyRQeH2xRgoErAPlzxmF1+ZCMTZ6kxrPkMuew2Uop0vAHgh5snA5
Sk5zEA4zPtU6sM5N+IELWhPZDx+vwg5AgRVKJgzJCWki8Ju56FCiC76C9tAuTxcs
SH3eQVcg7h6TsRB5ezCuvkuCxSlC/u9Hzre0xW8IsM+VM0p0dr86UO6H1EXYSPwl
3Xt3ER3nSDWT/kusF+uSKDBsP74LPhn7d8Tnp/wB7o713vBMxtcKveIRjAFwDE/D
LCWzXkq6bnrEWumjKelUFWZcVvJ4y0X4iEkzjIwzaNaCjDBRKzAdKKmlT5KaoA+H
IoyD3XvQO1ZY5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:29 2026 by rpki-client